- auth - hashing: argon2 - token: JWT (15m/30d) - events - user.registered - user.logged_id